Microsoft Azure AD Identity Protection Deep Dive

A deep dive look at the Azure AD Premium P2 Identity Protection feature. What it is and how best to use it.

🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!

▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
0:00 - Introduction
1:17 - The pillars of risk
3:22 - Where is risk?
7:19 - Risk pyramid
10:15 - Risk signal types
14:29 - Processing risk
18:21 - Enforcement on risk with Conditional Access
25:45 - Locking down security registration
28:48 - Risky sign-in experience
30:40 - Remediation
31:30 - Manual remediation and reports
37:35 - AAD Identity Protection policy and MFA registration
42:47 - Reporting and detail based on licensing
46:10 - Notifications
47:45 - Identity score
48:54 - Protection for external accounts
53:50 - Summary

▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:
► Azure AD Portal:
► Risk types:
► Combined Security registration:
► License requirements:
► Risk Analysis Workbook:

▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🥇 Certification Content Repository
📅 Weekly Azure Update
☁ Azure Master Class
⚙ DevOps Master Class
💻 PowerShell Master Class
🎓 Certification Cram Videos
🧠 Mentoring Content
❔ Question about my setup?
👕 Cure Childhood Cancer Charity T-Shirt Channel Store

#microsoft #azure #johnsavillstechnicaltraining #doyouevenazure #onboardtoazure #cloud

[NTFAQGuy]

Hey everyone, welcome to this video diving into Identity Protection! Please make sure to read the description for the chapters and key information about this video and others.

⚠ P L E A S E N O T E ⚠

🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there!
🕰 I don't discuss future content nor take requests for future content so please don't ask 😇

Thanks for watching!
☁🤙💪

[humblesoul]

Big fan John! I love the way you explain concepts. Clear, simple yet highly informative.

[SomeInfoSecDude]

Amazing content! I would never have scratched that little corner of Azure. Now it's on my to do list. Thanks a lot for all the effort you put into this!

[adyy]

Thanks a lot John for Explaining these concepts in a very simple and understanding way as what I was expecting as an Identity Specialist. Once again Thanks. Huge Fan.

[jan_bakker]

The best video on this subject that I've seen so far! Thanks John!

One important thing to add:

Administrators can name locations defined by IP address ranges to be trusted named locations.

Sign-ins from trusted named locations improve the accuracy of Azure AD Identity Protection's risk calculation, lowering a user's sign-in risk when they authenticate from a location marked as trusted. Additionally, trusted named locations can be targeted in Conditional Access policies.

[nattsvart]

Great video on the subject. Keep up the good work!

[James-sclz]

Thank you. At last someone has explained it well but John always explains things well because he understands how things work. Einstein is quoted as saying if you can't explain something in a simple way it means you don't understand it. I have been following John since the NTFAQ days. I had a question and looked and looked and no one could answer it but John did relating to why have both. I am actually surprised Microsoft actually have these policies outside of conditional access. It just complicates things. Personally I would have opted for a link to conditional access and finally we also have templates so they can be added there in the future... hopefully.

[ABatorfi]

Thanks John, fantastic content as always!

[MichaelBrodbeck]

Excellent delivery, much appreciated.

[danninoash]

GREAT GREAT GREAT video!!! learned so much form it, only from the first 20 mins! thank you!

[FSX]

Many careers are helped with your videos! Thanks so much.

[cmabr]

This is finally clear to me. Thank you.

[tczanardo]

Good explanation John!! Very clear!!! Thanks

[nithyanadhamsingaravadivel]

Excellent video with detailed information, thank you.

[logarithm]

Thanks for this video and this playlist in general. I have passed AZ-900, SC-900, AZ-104 and your videos have been of great help.
Next up is the AZ-500!

[michaelmendoza]

Excellent!!! Thank you for clarifying MS Identity Protection. MM

[dinamik]

An example of such a risky sign in as Moscow is very cool! Bravo!

[davidespano]

Very useful, thank you for your excellent work.

[Semtx]

John this becomes a bit scary.
Do you exactly know which subject are relevant for my current customer? again a bullseye on a subject that is super relevant.
I cant thank/praise you enough!

[yulaw]

enjoying this video for today learning, thanks a lot!